Ramblings about security, rants about insecurity, occasional notes about reverse engineering, and of course, musings about malware. What more could you ask for?

Tuesday, November 22, 2016

Cover your badge, cover your papers, think before your photo op

Yesterday Kris Kobach met with the president elect about plans for the Department of Homeland Security. The two posed for a photo after the meeting and that's where things get interesting.

Notice that although Kobach has a folio with him, he is carrying papers outside it. In today's world of high resolution photography, the words on the paper are clearly visible.

When we do penetration tests at Rendition Infosec, I find a tremendous amount of value in publicly available photographs. Sometimes these are pictures of employee badges (yes, Rendition has a badge printer). Other times photos reveal information about internal building layouts and other information that gives us an edge while pretexting in social engineering. In any case, this is a great example to remind your employees to be careful when cameras are around.